Skip to content

Bump the npm-all group with 17 updates#14

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-all-07c67ef97c
Open

Bump the npm-all group with 17 updates#14
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-all-07c67ef97c

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Bumps the npm-all group with 17 updates:

Package From To
@dnlup/fastify-traps 2.0.0 3.1.0
@fastify/static 6.10.2 9.0.0
@fastify/view 8.0.0 11.1.1
bootstrap 5.3.0 5.3.8
dotenv 16.3.1 17.4.0
fastify 4.19.2 5.8.4
fastify-cli 5.7.1 8.0.0
lodash 4.17.21 4.18.1
pug 3.0.2 3.0.4
rollbar 2.26.2 3.1.0
eslint 8.44.0 10.1.0
eslint-plugin-import 2.27.5 2.32.0
eslint-plugin-jest 27.2.2 29.15.1
jest 29.6.1 30.3.0
npm-check-updates 16.10.15 20.0.0
pino 8.14.1 10.3.1
pino-pretty 10.0.1 13.1.3

Updates @dnlup/fastify-traps from 2.0.0 to 3.1.0

Release notes

Sourced from @​dnlup/fastify-traps's releases.

3.1.0

3.1.0 (2024-11-29)

Features

3.0.2

3.0.2 (2024-01-16)

3.0.1

3.0.1 (2023-12-21)

Bug Fixes

3.0.0

3.0.0 (2023-08-31)

⚠ BREAKING CHANGES

  • types: the hooks type is changed
Changelog

Sourced from @​dnlup/fastify-traps's changelog.

3.1.0 (2024-11-29)

Features

3.0.2 (2024-01-16)

3.0.1 (2023-12-21)

Bug Fixes

3.0.0 (2023-08-31)

⚠ BREAKING CHANGES

  • types: the hooks type is changed

Features

  • upgrade fastify-plugin from 3.0.1 to 4.0.0 (a95fef8)

Bug Fixes

Commits

Updates @fastify/static from 6.10.2 to 9.0.0

Release notes

Sourced from @​fastify/static's releases.

v9.0.0

What's Changed

Full Changelog: fastify/fastify-static@v8.3.0...v9.0.0

v8.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v8.2.0...v8.3.0

v8.2.0

What's Changed

New Contributors

... (truncated)

Commits
  • 4eec671 Bumped v9.0.0
  • 4080e44 Update glob@13 (#550)
  • f6716f9 build(deps): bump content-disposition from 0.5.4 to 1.0.1 (#547)
  • 6165053 Bumped v8.3.0
  • e2e9f95 ci(ci): add concurrency config (#541)
  • 27f2bfe fix: if serve: false and root is not defined, only allow sending files with a...
  • ac71e33 refactor: small improvements (#539)
  • 97c55fb Replace substr with slice for URL manipulation (#538)
  • cec0bef chore(index): add jsdoc comments for static code analysis (#535)
  • 8cc6ca2 build(deps-dev): remove @​fastify/pre-commit (#534)
  • Additional commits viewable in compare view

Updates @fastify/view from 8.0.0 to 11.1.1

Release notes

Sourced from @​fastify/view's releases.

v11.1.1

What's Changed

New Contributors

Full Changelog: fastify/point-of-view@v11.1.0...v11.1.1

v11.1.0

What's Changed

New Contributors

Full Changelog: fastify/point-of-view@v11.0.0...v11.1.0

v11.0.0

What's Changed

New Contributors

Full Changelog: fastify/point-of-view@v10.0.2...v11.0.0

v10.0.2

What's Changed

... (truncated)

Commits
  • d0da734 Bumped v11.1.1
  • 399543d Fix using multiple view instances in production mode (#476)
  • c7f1cb0 chore: remove tap (#482)
  • add11a0 build(deps-dev): bump cross-env from 7.0.3 to 10.0.0 (#480)
  • c68d474 build(deps-dev): bump @​types/node from 22.15.34 to 24.0.8 (#479)
  • 969e833 chore(license): update date ranges; standardise style (#478)
  • 966840f Bumped v11.1.0
  • 8944500 feat: add Edge.js templating engine support (#472)
  • 0af5663 Add security notice for raw option (#475)
  • 64f6502 build(deps-dev): bump borp from 0.19.0 to 0.20.0 (#474)
  • Additional commits viewable in compare view

Updates bootstrap from 5.3.0 to 5.3.8

Release notes

Sourced from bootstrap's releases.

v5.3.8

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

v5.3.7

📚 Documentation

... (truncated)

Commits

Updates dotenv from 16.3.1 to 17.4.0

Changelog

Sourced from dotenv's changelog.

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

  • Fix clickable tip links by removing parentheses (#897)

... (truncated)

Commits

Updates fastify from 4.19.2 to 5.8.4

Release notes

Sourced from fastify's releases.

v5.8.4

Full Changelog: fastify/fastify@v5.8.3...v5.8.4

v5.8.3

⚠️ Security Release

This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf.

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.8.2...v5.8.3

v5.8.2

What's Changed

New Contributors

... (truncated)

Commits
  • af92d0d Bumped v5.8.4
  • a3e77ce Bumped v5.8.3
  • 4e1db5b fix: gate host and protocol getters on proxy trust function
  • a22217f ci(lock-threads): use shared lock-threads workflow (#6592)
  • 1851f20 docs: update links (#6593)
  • 9cc5187 types: Allow port to be null in request type definition (#6589)
  • 722d83b docs: replace redirected npm.im http-errors link (#6588)
  • a1413de docs: fix incorrect code examples in Reply and Request reference (#6582)
  • d7f01b6 docs: clarify content-type parser/schema mismatch is outside threat model (#6...
  • a0649e9 docs: update syntax markdown, absolute paths and links (#6569)
  • Additional commits viewable in compare view

Updates fastify-cli from 5.7.1 to 8.0.0

Release notes

Sourced from fastify-cli's releases.

v8.0.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cli@v7.4.1...v8.0.0

v7.4.1

What's Changed

... (truncated)

Commits
  • 88cbf5b Bumped v8.0.0
  • 5ae8c24 chore: removed .taprc file (#871)
  • 39ea5d4 test: migrate tap suite to node:test (#869)
  • 4fbbb28 ci: removed stale.yml (#870)
  • a8bf1b0 add experimental-strip-types in app-ts-esm (#798)
  • 1da1ad7 Add CLI option to specify directory or file to watch in watch mode (#794)
  • Description has been truncated

Bumps the npm-all group with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [@dnlup/fastify-traps](https://github.com/dnlup/fastify-traps) | `2.0.0` | `3.1.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `6.10.2` | `9.0.0` |
| [@fastify/view](https://github.com/fastify/point-of-view) | `8.0.0` | `11.1.1` |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.0` | `5.3.8` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.3.1` | `17.4.0` |
| [fastify](https://github.com/fastify/fastify) | `4.19.2` | `5.8.4` |
| [fastify-cli](https://github.com/fastify/fastify-cli) | `5.7.1` | `8.0.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [pug](https://github.com/pugjs/pug) | `3.0.2` | `3.0.4` |
| [rollbar](https://github.com/rollbar/rollbar.js) | `2.26.2` | `3.1.0` |
| [eslint](https://github.com/eslint/eslint) | `8.44.0` | `10.1.0` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.27.5` | `2.32.0` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `27.2.2` | `29.15.1` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.6.1` | `30.3.0` |
| [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | `16.10.15` | `20.0.0` |
| [pino](https://github.com/pinojs/pino) | `8.14.1` | `10.3.1` |
| [pino-pretty](https://github.com/pinojs/pino-pretty) | `10.0.1` | `13.1.3` |


Updates `@dnlup/fastify-traps` from 2.0.0 to 3.1.0
- [Release notes](https://github.com/dnlup/fastify-traps/releases)
- [Changelog](https://github.com/dnlup/fastify-traps/blob/next/CHANGELOG.md)
- [Commits](dnlup/fastify-traps@v2.0.0...v3.1.0)

Updates `@fastify/static` from 6.10.2 to 9.0.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v6.10.2...v9.0.0)

Updates `@fastify/view` from 8.0.0 to 11.1.1
- [Release notes](https://github.com/fastify/point-of-view/releases)
- [Commits](fastify/point-of-view@v8.0.0...v11.1.1)

Updates `bootstrap` from 5.3.0 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.0...v5.3.8)

Updates `dotenv` from 16.3.1 to 17.4.0
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.3.1...v17.4.0)

Updates `fastify` from 4.19.2 to 5.8.4
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v4.19.2...v5.8.4)

Updates `fastify-cli` from 5.7.1 to 8.0.0
- [Release notes](https://github.com/fastify/fastify-cli/releases)
- [Commits](fastify/fastify-cli@v5.7.1...v8.0.0)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `pug` from 3.0.2 to 3.0.4
- [Release notes](https://github.com/pugjs/pug/releases)
- [Commits](https://github.com/pugjs/pug/compare/pug@3.0.2...pug@3.0.4)

Updates `rollbar` from 2.26.2 to 3.1.0
- [Release notes](https://github.com/rollbar/rollbar.js/releases)
- [Changelog](https://github.com/rollbar/rollbar.js/blob/master/CHANGELOG.md)
- [Commits](rollbar/rollbar.js@v2.26.2...v3.1.0)

Updates `eslint` from 8.44.0 to 10.1.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.44.0...v10.1.0)

Updates `eslint-plugin-import` from 2.27.5 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.27.5...v2.32.0)

Updates `eslint-plugin-jest` from 27.2.2 to 29.15.1
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](jest-community/eslint-plugin-jest@v27.2.2...v29.15.1)

Updates `jest` from 29.6.1 to 30.3.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest)

Updates `npm-check-updates` from 16.10.15 to 20.0.0
- [Release notes](https://github.com/raineorshine/npm-check-updates/releases)
- [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md)
- [Commits](raineorshine/npm-check-updates@v16.10.15...v20.0.0)

Updates `pino` from 8.14.1 to 10.3.1
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v8.14.1...v10.3.1)

Updates `pino-pretty` from 10.0.1 to 13.1.3
- [Release notes](https://github.com/pinojs/pino-pretty/releases)
- [Commits](pinojs/pino-pretty@v10.0.1...v13.1.3)

---
updated-dependencies:
- dependency-name: "@dnlup/fastify-traps"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@fastify/static"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: "@fastify/view"
  dependency-version: 11.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: dotenv
  dependency-version: 17.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: fastify
  dependency-version: 5.8.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: fastify-cli
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: pug
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-all
- dependency-name: rollbar
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: eslint-plugin-import
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-all
- dependency-name: eslint-plugin-jest
  dependency-version: 29.15.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: jest
  dependency-version: 30.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: npm-check-updates
  dependency-version: 20.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
- dependency-name: pino-pretty
  dependency-version: 13.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 2, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants